Malicious code in slate-sync (npm)

The package slate-sync was found to contain malicious code...